Open Trott opened 2 years ago
- [ ] The ci email address goes solely to @joaocgreis. It would be good to find out what it's for, whether it gets any email, and who else might be added to it.
It's linked to https://github.com/nodejs-ci and is used by our Jenkins CI to authenticate to GitHub, including accessing the private repos. It got one mail when I invited it to the private libuv org/repo in May last year (Joao followed up with me).
For completeness, the build email is linked to https://github.com/node-forward-build. I don't have the history as to why we have two GitHub accounts associated with the build WG. Details for both of the accounts are in the build secrets repo under build/infra
.
I believe we can also remove crypto-report
Audit zoom-nodejs. (Seems like a somewhat weird mix of people. Who is on there and why? What is the purpose of the email address?)
Anybody who hosts zoom calls using the Node.js account should be on this list. Needed to get authentication tokens that are sometimes needed.
The security-ecosystem address goes to HackerOne. I don't believe it is taking any more reports. We should probably remove that email address? Or set up an auto-reply? Or maybe HackerOne sends a decent auto-reply?
Are we clear on this, @RafaelGSS ? Should we include it to the next meeting?
Yes, we should probably remove that email address.
The build-security address has @mmarchini and two other people who are (AFAIK) not active (@maclover7 and @gibfahn). It would be good to find out what it's for, whether it gets any email, and who else might be added to it.
No idea what that was for, didn't know it existed. Also seems like it was removed so you can check that as done: https://github.com/nodejs/email/commit/e8e43b2785e6cc8bd63689547deb6f92d3dc1135
Originally posted by @Trott in https://github.com/nodejs/email/issues/181#issuecomment-1048829855